sealingtech / CLIP

SealingTech's Certifiable Linux Integration Platform
9 stars 12 forks source link

Review use of unconfined_domain_noaudit #93

Open d3vilbox opened 5 years ago

d3vilbox commented 5 years ago

The unconfined_domain_noaudit() interface doesn't use any attributes to provide access and doesn't have anything in the gen_requires block that will prevent the access from being enabled if the unconfined module is disabled. We need to find a way to remove this access or at least decrease what domains use this interface.